ISACA - CRISC

[koxinga]

I am thinking of taking CRISC certification this year, but I don't see much in terms of training in Singapore. I found two:

Ad Astra : The Ultimate IT Risk Management Master-class (CRISC Exam Preparation Course)- Eventbrite

PDATrain: CRISC certification | ALC

Question 1: Has anyone tried either of this two before and whether effective or not?

Question 2: One is in Feb while the other is in May. Given the exam is it June, in your opinion, is it better to take the May one?

Question 3: What sort of working background is preferred? I am currently in consultancy, and I have CGEIT among others (PRINCE2, ITIL). Governance (not audit) was my background in the previous job before this consultancy gig.

Edit:
CGEIT was a nightmare. Despite of background, I found reading and understanding the questions taking up considerable time and the lack of materials online made it challenging. Did it by self-study.

 

[alvinaloy]

Hey man, yeah CGEIT was horrible; horrible questions and horrible text. Prepare for more of the same with CRISC. I personally like M_o_R though it's not as recognised, but it's a lot more logical and practical.

Self studied for both so can't really answer for the course... Though I felt a course is unnecessary. I lean more towards ALC since I've never heard of Ad Astra before. AA's website is curious in that I can't seem to discern what their company's core business is; thus a concern.

 

[koxinga]

Ya, after the CGEIT experience... I thought a course might help. Clarity does not mean simplicity, but whoever wrote those questions wasn't just trying to test your knowledge or application but your reading/comprehension skills.

I have heard of M_o_R (due to PRINCE2 being under Axelos) before but does not seem to have much traction locally. Also got self-serving reason of getting enough CPE (Does taking CRISC help?)

Need to think about this.

 

[alvinaloy]

My personal opinion is the those courses only help you to pass, and not help you to understand.

I've got a copy of the M_o_R (old version though) that I can lend you to have a look. I think it's excellent for knowledge but not for recognition. You can register for an online exam. If you prefer good ole' pencil and paper shading type, they'll arrange for you to take at the British Council.

CRISC exam hours does contribute CPE for CGEIT; risk is a subset of governance after all. if you're hard pressed for CPE, take COBIT Foundation then (if you haven't already).

 

[sqyong]

Register first and panic.
That'll help push us harder.
I registered for June's.
Joined Isaca's study group forum, and a Google group's forum.
Purchased review manual, downloaded Risk IT Framework & Practitioner guide and pdf slides I googled for self-study.
Contemplating USD185's online Q&E.
In a nutshell, read and practice, practice practice...

 

[seesiang]

Register first and panic.
That'll help push us harder.
I registered for June's.
Joined Isaca's study group forum, and a Google group's forum.
Purchased review manual, downloaded Risk IT Framework & Practitioner guide and pdf slides I googled for self-study.
Contemplating USD185's online Q&E.
In a nutshell, read and practice, practice practice...

If you are Isaca member, the rate is better than non-member.

How many pages are there?

 

[sqyong]

Delay no more.

If you are Isaca member, the rate is better than non-member.

How many pages are there?

Yes I'm Isaca member.
Passed CISA.

CRISC manual is 204 pages.
Read that it's 25% "slimmer" then 2014's.
It's still on the ship/plane.

I purchased the 12 month Q&E.
Web-based.

Joined official crisc community on Isaca, and joined google group.

Planning to read/use:
2015 manual.
online Q&E.
Risk IT Prac Guide.
Risk IT Framework.
Test writer guide.

All the best to the 2015 June exam takers.

Delay no more...

 

[seesiang]

Yes I'm Isaca member.
Passed CISA.

CRISC manual is 204 pages.
Read that it's 25% "slimmer" then 2014's.
It's still on the ship/plane.

I purchased the 12 month Q&E.
Web-based.

Joined official crisc community on Isaca, and joined google group.

Planning to read/use:
2015 manual.
online Q&E.
Risk IT Prac Guide.
Risk IT Framework.
Test writer guide.

All the best to the 2015 June exam takers.

Delay no more...

All the best.

 

[seawyk]

Register first and panic.
That'll help push us harder.
I registered for June's.
Joined Isaca's study group forum, and a Google group's forum.
Purchased review manual, downloaded Risk IT Framework & Practitioner guide and pdf slides I googled for self-study.
Contemplating USD185's online Q&E.
In a nutshell, read and practice, practice practice...

i agree... once you have a hard deadline in the form of the examination date, miracles can happen. And if that doesn't work, you will start praying for miracles as the exam date draws nearer.

 

[seawyk]

My personal opinion is the those courses only help you to pass, and not help you to understand.

I've got a copy of the M_o_R (old version though) that I can lend you to have a look. I think it's excellent for knowledge but not for recognition. You can register for an online exam. If you prefer good ole' pencil and paper shading type, they'll arrange for you to take at the British Council.

CRISC exam hours does contribute CPE for CGEIT; risk is a subset of governance after all. if you're hard pressed for CPE, take COBIT Foundation then (if you haven't already).

I agree and disagree with Alvin. I am certified in both MoR and CRISC and yes, i am also more inclined towards MoR. But with regards to the point on training helping to pass and not to understand, this will very much depend on the student himself. In many trainings, students attend the classes with the expectation that they will then be ready for the examination upon completing the training. This is definitely not the case. To maximise your learning experience, the student should read ahead, understand the concepts and use the training and the trainer to clarify concepts that are not clear or you have doubts on, especially for these specialised certifications. Unfortunately too many students wants to be spoon fed and just want the certification. In that case, spend the money on exam banks then rather than the training. Remember, even with the certification, an experience Risk professional will know if you are worth your salt simply by chatting with you. So end of the day, who are you actually kidding?

Actually, Risk management goes beyond the textbooks and very often requires you to have some degree of knowledge in security and/or governance and ideally some practical experience.

If you do not know what you are getting yourself into, get the books and read first to decide if it is your cup of tea before you dive head in